2020

A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallel

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N rout

Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecif

Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with access to log in to Jam

A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc s

In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is us

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. Thi

AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request

FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modi

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modi

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity P

A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -wi

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modi

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm

An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed TC

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. A

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a

DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.

Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.

An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach

In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could

In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a

Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N

Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N

Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an una

Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password v

Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute ar

In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free whe

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages an

An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A

An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain

In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injectio

There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalid

In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private cod

GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.

GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible t

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.

ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' charact

FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.

The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly ha

Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via

A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380